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In the Claims; 

1. (Currently Amended) An apparatus for performing a SubByte function of the Rijndael 
Block Cipher, comprising: 

an S-box circuit including 

an inverse transformation circuit having a lookup table and being 
configured and arranged to transform an input using a look-up table; 

constructed by oompooing a first and o e oond transformation, wh e r e in th e 
first transformation io a look up table , and the second tronaformation is 

a combinational logic circuit configured and arranged to perform an 
affme-all transformation that performs both an affme and inverse affine 
transformatio n in response to respective load patterns . 

2. (Currently Amended) The apparatus as claimed in claim 1, wherein: 

the look-up table is the multiphcative inverse in the finite field GF(2^) having 
{00} mapped to itself^-aad 

tho affin e all transformation is implomont e d using a combinational logic circuit . 

3. (Previously presented) The apparatus as claimed in claim 2, wherein: 

the look-up table is implemented by a read-only memory (ROM); and 



the comb 


mational logic circuit implements the equations 
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having p = P0P1P2P3P4P5P6P7 as a load pattern consisting of {1 0001 1 11 } for the affine 
transformation and {00100101} for the inverse affme transformation and having v as a 
load vector = V0V1V2V3V4V5V6V7 consisting of {11000110} for the affme transformation 
and {10100000} for the inverse affme transformation. 



2 



App. Serial No. 10/538,556 
Docket No.: US020576US 

4. (Previously presented) An apparatus for encrypting and decrypting data, comprising: 

a data processing module arranged to perform a byte substitution, wherein at least 
part of said data processing module comprises: 
a look-up table, 

a storage device for storing the look-up table, and 

a circuit having shared logic that performs a single transform that accomphshes 
either an affine and an inverse affme transformation. 

5. (Previously presented) The apparatus as claimed in claim 4 wherein said look-up 
table is a multipUcative inverse of the finite field GF(2^). 

6. (Previously presented) The apparatus as claimed in claim 5, wherein said look-up table 
is implemented by means of a read only memory (ROM). 

7. (Previously presented) The apparatus as claimed in claim 4, wherein said look-up table 
is implemented by means of a read only memory (ROM). 

8. (Original) The apparatus as claimed in claim 4, wherein the apparatus comprises a 
plurality of instances of a data processing module arranged in a data processing pipeline. 

9. (Original) The apparatus as claimed in claim 4, wherein the apparatus is arranged to 
perform encryption or decryption in accordance with the Rijndael Block Cipher, and 
wherein the data processing module is arranged to implement a Rijndael round. 

10. (Original) An apparatus as claimed in claim 9, wherein the data processing module is 
arranged to implement the SubByte transformation of the Rijndael round using the 
lookup table composed with the affme transformation for encryption and the inverse 
affme transformation for decryption. 

11. (Previously presented) The apparatus as claimed in claim 10, wherein said look-up 
table is implemented by means of a read only memory (ROM). 
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12. (Original) A apparatus for performing a SubByte fianction of a round of the Rijndael 
Block Cipher, comprising an S-box constructed by composing, 

means for obtaining the multipUcative inverse in the finite field GF(2^), and 
means for performing an affme-all transformation consisting of an affine and 
inverse affine transformation as a single affine transformation. 

13. (Previously presented) The apparatus as claimed in claim 12, wherein said means for 
obtaining the multiphcative inverse is a look-up table, and said means for performing the 
affine-all transformation is a combinational logic circuit. 

14. (Previously presented) A method for performing a SubByte function of a Rijndael 
round of the Rijndael Block Cipher, comprising the steps of 

creating a look-up table for the multiplicative inverse in the finite field GF(2^); 

providing an affine-all transformation consisting of an affine and inverse affme 
transformation in a single affine transformation; 

composing an S-box constructed of the look-up table and the affine-all 
transformation; and 

performing a non-linear byte substitution using the composed S-box. 

15. (Previously presented) The method of claim 14, wherein the providing step further 
comprises the step of providing a shared logic circuit that performs the single affine 
transformation. 

16. (Previously presented) The method of claim 14, further comprising the step of storing 
the look-up table in a read -only memory (ROM). 

17. (Previously presented) The method of claim 16, wherein the providing step further 
comprises the step of implementing a shared logic circuit that performs the single affine 
transformation. 
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18. (Previously presented) The method of claim 14, wherein: 

the look-up table is the multiplicative inverse in the finite field GF(2^) having 
{00} mapped to itself; and 

the providing step further comprises the step of implementing a combinational 
logic circuit that performs the single affine transformation. 
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